refactor(dependabot): restructure skill to recommended subdirectory format v1.3.0

[vnz]

Summary

• Migrate dependabot skill from legacy flat structure to modern subdirectory structure
• Extract ecosystem reference tables to a separate file for progressive disclosure

Changes

Structure Migration

Before (legacy):
skills/
└── dependabot.md

After (recommended):
skills/
└── dependabot/
    ├── SKILL.md
    └── references/
        └── ecosystems.md

Why This Matters

• Progressive disclosure: Claude loads SKILL.md first, then fetches reference files only when needed
• Reduced token usage: Simple invocations don't load the full ecosystem tables (~40 lines)
• Extensibility: Can now add more reference files, examples, or scripts alongside the skill
• Best practices: Follows official Claude Code plugin documentation

Files Changed

File	Change
skills/dependabot.md	Renamed to skills/dependabot/SKILL.md
skills/dependabot/references/ecosystems.md	New - extracted ecosystem tables
plugin.json	Version bump 1.2.0 → 1.3.0
marketplace.json	Version bump 1.2.0 → 1.3.0

Test plan

• Verify skill still triggers with "use dependabot"
• Verify ecosystem detection works
• Verify reference file is loaded when needed

🤖 Generated with Claude Code

[gemini-code-assist]

Summary of Changes

Hello @vnz, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request modernizes the structure of the 'dependabot' skill by adopting a subdirectory format and externalizing ecosystem reference data. This change aims to improve progressive disclosure, reduce token usage for simpler invocations, enhance extensibility for future additions, and align with best practices for Claude Code plugins.

Highlights

• Skill Structure Refactoring: The 'dependabot' skill has been refactored from a flat file structure (skills/dependabot.md) to a recommended subdirectory format (skills/dependabot/SKILL.md).
• Ecosystem Reference Extraction: Detailed ecosystem alias mappings and auto-detection methods have been extracted from the main skill file into a new dedicated reference file (skills/dependabot/references/ecosystems.md).
• Version Updates: The version for the 'dependabot' skill and plugin has been incremented from 1.2.0 to 1.3.0 in both marketplace.json and plugin.json.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This pull request is a well-executed refactoring of the dependabot skill, migrating it to the recommended subdirectory structure. This improves the project by enhancing modularity, reducing token usage on simple invocations, and aligning with best practices for Claude Code plugins. The changes are clear and the reasoning is well-documented in the pull request description. My review includes a couple of minor suggestions to improve the readability of the new reference file by ensuring consistent code formatting for technical terms, filenames, and paths.